CVE-2005-2768: Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailM...

Security readout for executives and security teams

CVE-2005-2768 is a memory corruption flaw in the Sophos Antivirus Library. A specially crafted Visio file could trigger a heap buffer overflow when scanned, potentially letting an attacker run code through systems that process untrusted files, including mail security products. Exposure is most likely in legacy Sophos deployments that use the affected Antivirus Library, especially endpoint antivirus or mail-filtering systems that automatically scan Visio attachments. The bundle does not identify exact affected versions, CPEs, or current support status. Prioritize if any legacy Sophos scanning infrastructure remains in production, especially email gateways. The business risk is attacker-controlled document scanning leading to possible code execution in a security tool, but urgency depends on whether affected legacy products are still deployed. Mitigation focus: Check Sophos advisory guidance for affected and fixed library versions.; Upgrade or retire unsupported Sophos Antivirus Library-dependent products.; Reduce exposure to untrusted Visio attachments until verified fixed..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.